vulnerability@kaspersky.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS vulnerability@kaspersky.com
03
assessed vulnerabilities (37)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-2334US | — | — | ||
An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to… | ||||
| CVE-2025-14601US | — | — | ||
An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient i… | ||||
| CVE-2025-14602US | — | — | ||
The application generates uploaded file names using a weak and predictable method based on the request timestamp. This allows a remote attacker to accurately guess or brute-force t… | ||||
| CVE-2025-14603US | — | — | ||
The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents… | ||||
| CVE-2025-14600US | — | — | ||
An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker… | ||||
| CVE-2026-72530US | —OT critical | KEV | ||
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a special… | ||||
| CVE-2026-72529US | —OT critical | KEV | ||
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an ar… | ||||
| CVE-2024-13942US | — | — | ||
Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD).
The code reads the he… | ||||
| CVE-2026-8398US | —OT critical | KEV | ||
A supply chain attack compromised the official installation packages of DAEMON Tools Lite (Windows versions 12.5.0.2421 through 12.5.0.2434), distributed from the legitimate websit… | ||||
| CVE-2025-64984US | — | — | ||
Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), Kaspersky Industrial CyberSecurity for Li… | ||||
| CVE-2025-9060US | — | — | ||
A vulnerability has been found in the MSoft MFlash
application that allows
execution of arbitrary code on the server. The issue occurs in the
integration configuration functio… | ||||
| CVE-2025-7771US | — | Exploit | ||
ThrottleStop.sys, a legitimate driver, exposes two IOCTL interfaces that allow arbitrary read and write access to physical memory via the MmMapIoSpace function. This insecure imple… | ||||
| CVE-2024-13614US | — | — | ||
Kaspersky has fixed a security issue in Kaspersky Anti-Virus SDK for Windows, Kaspersky Security for Virtualization Light Agent, Kaspersky Endpoint Security for Windows, Kaspersky… | ||||
| CVE-2019-15690US | — | — | ||
LibVNCServer 0.9.12 release and earlier contains heap buffer overflow vulnerability within the HandleCursorShape() function in libvncclient/cursor.c. An attacker sends cursor shape… | ||||
| CVE-2024-8653US | medium6.1 | — | ||
A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific paths on the site.
This issue affects NetCat CMS v. 6.4.0.2… | ||||
| CVE-2024-8652US | medium6.1 | — | ||
A vulnerability in NetCat CMS allows an attacker to execute JavaScript code in a user's browser when they visit specific path on the site.
This issue affects NetCat CMS v. 6.4.0.24… | ||||
| CVE-2024-8651US | medium5.3 | — | ||
A vulnerability in NetCat CMS allows an attacker to send a specially crafted http request that can be used to check whether a user exists in the system, which could be a basis for… | ||||
| CVE-2024-5866US | medium4.3 | — | ||
Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing listing of arbitrary directory outside the… | ||||
| CVE-2024-5865US | medium6.5 | — | ||
Vulnerability in Delinea Centrify PAS v. 21.3 and possibly others. The application is prone to the path traversal vulnerability allowing arbitrary files reading outside the web pub… | ||||
| CVE-2023-3943US | — | — | ||
Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack… | ||||